ComputerWorldIndependent

Throwback Thursday: Whose idea was this, anyway?

Credit to Author: Sharky| Date: Thu, 26 Oct 2017 03:00:00 -0700

This pilot fish is in charge of computing facility operations, and he takes security seriously.

“As part of trying to do the ‘right’ thing, I instituted some policies, such as regular password changes, regular checks and purges of our password files, group files and user database,” says fish.

But he knows that, for some people, that’s not enough. So fish and his team decide to post a list of the worst password policy violators — who’s using old passwords and how long it’s been since they’ve been changed.

That way, everyone will see just how bad things can get when people aren’t paying attention.

A team member puts together the list, then brings it to fish and says, “Would you look this over before I post it?”

To read this article in full or to leave a comment, please click here

Read More
SecuritySophos

Neue Ransomware: Dieses Mal ist der Wolf im Hasenpelz unterwegs

Credit to Author: Jörg Schindler| Date: Wed, 25 Oct 2017 06:50:10 +0000

Seit gestern ist eine neue Ransomwarewelle unterwegs, die bislang vor allem Russland, die Ukraine und Teile von Europa im Visier hat. Unser SophosLabs-Spezialist Chester Wisniewski hat sich „Bad Rabbit“ einmal näher angeschaut und ist nicht wirklich überrascht über dessen Auftritt. „Es war wohl tatsächlich nur eine Frage der Zeit, bis irgendjemand die Ideen und Techniken, [&#8230;]<img alt=”” border=”0″ src=”https://pixel.wp.com/b.gif?host=news.sophos.com&#038;blog=834173&#038;post=43685&#038;subd=sophos&#038;ref=&#038;feed=1″ width=”1″ height=”1″ /><img src=”http://feeds.feedburner.com/~r/sophos/dgdY/~4/xL2LnfgxZzs” height=”1″ width=”1″ alt=””/>

Read More
FortinetSecurity

The DUHK Vulnerability

There have been some news items floating around the Internet discussing a weakness in the ANSI X9.31 random number generator (RNG) known as DUHK (for Don't Use Hard-coded Keys) that had affected older FortiGate devices. An update was issued more than a year ago when the flaw was first announced to Fortinet.

Read More